ID CVE-2007-4980
Summary The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.
References
Vulnerable Configurations
  • cpe:2.3:a:gcaldaemon:gcaldaemon:1.0_beta13:*:*:*:*:*:*:*
    cpe:2.3:a:gcaldaemon:gcaldaemon:1.0_beta13:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 15-10-2018 - 21:39)
Impact:
Exploitability:
CWE CWE-189
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
bid 25704
bugtraq 20070918 GCALDaemon Remote DoS
osvdb 40922
sreason 3154
xf gcaldaemon-httplistener-dos(36670)
Last major update 15-10-2018 - 21:39
Published 19-09-2007 - 18:17
Last modified 15-10-2018 - 21:39
Back to Top